Auto-creation of User Accounts

Auto-creation of user accounts can be enabled on the service
provider side. An account would be created when there is none corresponding
to the identity provider user account requesting access. This might
be necessary, for example, when a new service provider has joined
an existing circle of trust.

Note –

Auto-creation is supported only when the service provider
is running on an instance of OpenSSO Enterprise as it extends that
product's Dynamic Profile Creation functionality.

To Enable Auto-creation

Before You Begin

You must configure the attribute mapper on the identity provider
side to include an AttributeStatement from the
user. The account mapper on the service provider side will perform
user mapping based on the AttributeStatement.